Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File: qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier: W8mBvB+2o18TzQb4tVaXeO3DoJKvCN3MH/F04DMwki0=
Subject key identifier: FE:43:00:38:35:5D:49:9A:E7:35:76:98:C7:CC:31:01:0F:4F:24:24
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 019675679C6FCF4B73FA16349451DED6A657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number: 10F7
Signing time: Sun 27 Apr 2025 04:00:46 +0000
Manifest this update: Sun 27 Apr 2025 04:00:46 +0000
Manifest next update: Mon 28 Apr 2025 04:00:46 +0000
Files and hashes: 1: BUih8qlxlM36nVLgODl8U2c6gUs.roa (hash: 12PYnDYm07AzmCTN8oiBmbq6Fu/Z7ysAToKr3Xj/N/k=)
2: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: iD+/MA1+C06kTmyBqo4zEa1N67mkj5ZKAMINO9YMhrs=)
3: zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa (hash: u+uK7Yhm9OY6tW2paZGMVNaIcQPxwSqykT+lN4CLyn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:9c:6f:cf:4b:73:fa:16:34:94:51:de:d6:a6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Apr 27 04:00:46 2025 GMT
Not After : Apr 28 04:00:46 2025 GMT
Subject: CN=fe430038355d499ae7357698c7cc31010f4f2424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:48:99:6f:52:9d:c9:e1:56:7f:68:fb:46:
af:1c:82:b4:50:95:ad:02:c0:98:41:d2:16:23:d4:
6e:e3:68:17:2a:3b:e7:1c:04:a1:d0:a1:af:6f:f1:
cf:73:bd:67:28:16:58:dc:61:3e:7f:1d:96:c4:2e:
75:20:f5:3b:5d:21:34:13:42:95:4e:7b:78:3d:e0:
8e:92:43:55:c2:13:03:c3:90:9d:3e:11:83:b4:f8:
1d:eb:a7:74:8d:13:64:08:2f:ab:3f:44:14:2a:51:
4a:81:a8:1d:92:74:c2:f7:72:e1:65:f1:a6:c6:33:
e7:49:40:3f:aa:db:98:fa:8d:bf:d4:99:37:c0:a2:
3f:c9:11:17:b1:18:8e:bc:34:9d:c5:ab:2e:31:1a:
58:b8:9e:9f:8a:c3:e5:b4:23:21:20:8e:c4:f9:cf:
22:a0:91:31:8e:a7:18:65:39:f9:6a:71:7a:3b:a4:
bb:21:07:a5:0d:81:8c:a8:a4:a9:45:24:53:cb:b2:
2c:67:62:7d:d2:da:2f:66:db:b1:ca:45:85:e0:bf:
8c:a7:4a:b4:18:ff:71:43:bd:4f:87:75:19:ed:15:
1c:ae:33:54:7a:42:26:9a:8b:f4:8f:3f:c7:a1:cb:
a4:fc:32:8f:b0:f3:39:7c:16:d6:67:d8:de:c5:b6:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:43:00:38:35:5D:49:9A:E7:35:76:98:C7:CC:31:01:0F:4F:24:24
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:36:27:40:57:6a:72:8a:b1:2e:83:c8:ec:9c:38:a4:8a:2d:
f5:26:13:2c:46:88:85:35:41:b8:75:00:ac:8a:12:ea:66:9e:
0c:62:36:b8:50:cc:eb:45:fc:79:1b:0f:7d:18:bf:f8:5d:78:
63:91:b9:7c:31:70:87:64:82:a1:9c:57:b1:d2:87:3a:a0:74:
aa:26:02:4b:e2:21:2f:2b:0b:3d:6d:20:d8:11:ad:cc:80:7e:
a9:8d:5d:54:dc:68:ac:1d:0a:f7:03:ba:27:2e:5a:83:5d:c2:
74:a7:c0:e6:aa:51:9c:5c:30:b3:f7:e6:07:00:b9:63:69:85:
82:2f:3e:cf:47:b8:ea:0e:41:3c:a2:af:ff:03:f9:57:04:0f:
b5:ee:ef:44:87:cf:76:e6:9f:40:d2:cd:b4:62:c6:be:9b:3b:
e4:73:6b:0d:0e:af:dd:1a:63:3f:c6:20:0e:0c:38:ec:94:f0:
6b:d1:ab:7b:5d:46:4f:32:a0:f7:41:a0:20:c4:4c:fc:c1:e1:
c2:c8:06:56:6a:02:bd:9b:87:9c:34:2d:41:88:91:f4:18:e3:
7b:e9:5b:39:32:57:2c:88:e9:c1:94:bc:93:a1:34:35:f4:d2:
a1:33:79:58:6f:fa:61:aa:59:92:67:88:4d:8b:96:79:83:98:
dc:03:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:55 2025 by rpki-client